Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File:                     53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier:          Xd4vWnXVPsgF8jL5k7lXOUXjEHV4jIhgTw2OU30G70I=
Subject key identifier:   ED:3B:5A:4F:E6:29:CB:2D:72:2B:D8:5F:01:74:EF:84:03:CB:C2:EC
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer:       /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial:       7E175A66601EB69801D22AC197B01CBAD3B78A2B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number:          85
Signing time:             Fri 24 Jul 2026 15:21:33 +0000
Manifest this update:     Fri 24 Jul 2026 15:16:33 +0000
Manifest next update:     Sat 25 Jul 2026 18:30:33 +0000
Files and hashes:         1: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
                          2: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: h1oRYSiuXSBc5DX314TQ6g+dHyE8COUfH2iLPPo9mZw=)
                          3: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
                          4: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
                          5: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
                          6: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
                          7: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:5a:66:60:1e:b6:98:01:d2:2a:c1:97:b0:1c:ba:d3:b7:8a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
        Validity
            Not Before: Jul 24 15:16:33 2026 GMT
            Not After : Jul 25 18:30:33 2026 GMT
        Subject: CN=ED3B5A4FE629CB2D722BD85F0174EF8403CBC2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:19:36:f2:91:0f:2e:81:57:77:75:89:56:
                    d6:7e:54:c1:8b:47:b2:4c:65:25:b6:87:78:93:e3:
                    46:c4:38:ed:83:bb:c2:9e:7c:d5:33:90:f3:34:84:
                    c8:6d:f7:cf:2d:2b:d8:4d:8b:37:66:4c:8a:3a:66:
                    0b:dc:33:a2:8a:b2:3a:3a:4c:a2:d1:d6:ef:bb:11:
                    60:0e:07:09:c4:7a:b3:24:e1:21:ea:e2:07:45:75:
                    54:c4:0f:b9:4a:9c:ec:74:72:f2:80:ff:2e:d0:c7:
                    59:90:3e:3c:2b:2a:34:69:de:11:01:13:8e:7d:68:
                    73:38:90:88:c0:1b:81:bc:3c:76:e5:91:ed:ee:f2:
                    c9:06:3c:cb:e2:55:4f:5b:85:e8:0f:9b:7e:35:8d:
                    67:98:ea:af:f3:90:b5:2e:2e:cb:33:eb:d1:00:c7:
                    f6:40:da:11:7d:6c:07:51:4e:4c:1b:a3:cd:ee:fb:
                    b2:a9:3d:30:1b:e7:28:58:df:ce:41:e4:10:fb:2f:
                    15:4e:9c:2b:7e:29:88:cb:86:7c:d1:72:f7:3b:6b:
                    a3:d4:d0:d6:26:d3:1e:b8:ef:c5:4e:d4:26:72:46:
                    cf:81:07:c7:07:11:52:fb:7f:04:e1:4d:fb:06:82:
                    84:2d:f2:f3:d2:22:23:36:d5:8c:1f:f8:ec:16:ba:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:5A:4F:E6:29:CB:2D:72:2B:D8:5F:01:74:EF:84:03:CB:C2:EC
            X509v3 Authority Key Identifier:
                keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:32:70:7f:ae:95:7b:a7:65:15:ea:68:67:ed:71:4c:17:
         fb:42:91:41:c7:b3:3c:5e:1a:9a:59:57:39:aa:6b:23:90:5d:
         32:78:4b:b5:cd:0a:54:56:32:35:74:9d:04:40:b3:46:dc:e3:
         d7:eb:20:a4:14:f0:99:3e:f9:0d:ae:af:93:f2:37:22:fe:1a:
         2d:8b:a1:0d:b2:c2:e7:a9:a1:99:20:91:8e:23:d2:ec:54:09:
         37:90:c9:8e:48:45:39:7a:40:d0:1c:f0:c8:18:dd:1b:7d:81:
         af:60:a6:ec:7b:e0:36:9a:53:4b:9f:f9:a3:df:64:90:8e:ca:
         c1:3a:73:a1:b9:4f:38:19:3c:06:c4:66:ab:06:41:f1:02:2b:
         6d:eb:2c:28:aa:77:34:b9:63:12:1f:b5:71:b3:f5:9c:7c:b0:
         dd:f1:2b:03:f8:81:fa:96:ff:46:b1:97:71:1b:d1:a2:ab:9f:
         1a:9d:2a:b3:2f:1a:3c:02:e9:3f:7a:d4:a5:70:4a:f3:01:0d:
         8a:38:f9:39:12:b6:49:8e:eb:8b:86:1c:14:e4:2c:21:27:76:
         73:24:d4:58:be:27:59:c3:ce:71:7e:77:d8:93:f4:76:f6:a0:
         5d:42:26:f3:4c:f1:5e:7c:86:45:51:45:fc:65:3b:bd:36:1d:
         fc:d6:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:17 2026 by rpki-client